{"license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","attribution":"ChainChoice (https://chainchoice.io)","category":"smart_contract_audits","evidenceReadAt":"2026-11-03","generatedAt":"2026-11-12","criteria":[{"id":"postAuditRecord","label":"Post-audit exploit record","weight":32},{"id":"accountability","label":"Accountability & reconstructability","weight":28},{"id":"methodDepth","label":"Method depth for your stack","weight":24},{"id":"priceTransparency","label":"Price transparency","weight":16}],"providers":{"certora":{"postAuditRecord":{"s":3,"q":"Unfortunately, while the verified properties guaranteed solvency at a high level, they were not strong enough to detect the rounding error that caused the recent exploit in Balancer's v2 Stable Pools.","u":"https://www.certora.com/blog/breaking-down-the-balancer-hack","d":"2026-11-03"},"accountability":{"s":8,"q":"We made a mistake: the isolated Leverage contract contained an overly broad approval that allowed an attacker to manipulate borrowing.","u":"https://www.certora.com/blog/silo-incident-report-contract-exploit","d":"2026-11-03"},"methodDepth":{"s":10,"q":"We are open-sourcing the Certora Prover, the most advanced Formal Verification (FV) engine for Ethereum (EVM), Solana (sBPF), and Stellar (WASM).","u":"https://www.certora.com/blog/certora-goes-open-source","d":"2026-11-03"},"priceTransparency":{"s":7,"q":"Run the leading formal verification tool for free | Audit + formal verification retainer","u":"https://www.certora.com/pricing","d":"2026-11-03"}},"sherlock":{"methodDepth":{"s":5,"q":"Sherlock combines the coordination of a staffed audit with the parallel discovery of a contest.","u":"https://docs.sherlock.xyz/audits/protocols","d":"2026-11-03"},"priceTransparency":{"s":4,"q":"In many engagements, ~80% of fees go directly to researchers.","u":"https://docs.sherlock.xyz/audits/protocols","d":"2026-11-03"},"postAuditRecord":{"s":5,"q":"\"name\":\"SherlockClaimManager\" | \"value\":\"0x3019e52a670390f24e4b9b58af62a7367658e457bbb07f86b19b213ec74b5be7\" | \"block_number\":16819924,\"block_timestamp\":\"2023-03-13T15:21:35.000000Z\" | \"method_call\":\"ClaimPayout(uint256 claimID, address receiver, uint256 amount)\" | \"value\":\"3396964000000\"","u":"https://eth.blockscout.com/api/v2/addresses/0xFeEDD254ae4B7c44A0472Bb836b813Ce4625Eb84/logs","d":"2026-11-03"},"accountability":{"s":8,"q":"Protocol Customer: Euler Finance | Protocol Code Commit hash: cd3036e0087280365819f99ad531141894d0b7ee | Covered Contract(s): https://github.com/euler-xyz/euler-contracts/commit/cd3036e0087280365819f99ad531 141894d0b7ee","u":"https://raw.githubusercontent.com/sherlock-protocol/sherlock-reports/main/coverage-agreements/deprecated/Euler%20Coverage%20Agreement%20(Revised%202022.10.19).pdf","d":"2026-11-03"}},"cyfrin":{"postAuditRecord":{"s":4,"q":"All files present in the src directory of the Bunni repo at commit hash 344ec22 were included in the scope of the audit","u":"https://raw.githubusercontent.com/Cyfrin/cyfrin-audit-reports/main/reports/2025-06-10-cyfrin-bunni-v2.1.pdf","d":"2026-11-03"},"accountability":{"s":7,"q":"Lead Auditors Giovanni Di Siena Draiakoo Assisting Auditors Pontifex","u":"https://raw.githubusercontent.com/Cyfrin/cyfrin-audit-reports/main/reports/2025-06-10-cyfrin-bunni-v2.1.pdf","d":"2026-11-03"},"methodDepth":{"s":7,"q":"Formal Verification Mathematically prove your smart contracts behave as intended.","u":"https://www.cyfrin.io/services/audits","d":"2026-11-03"},"priceTransparency":{"s":2,"q":"Our engineers will review the codebase complexity and size, estimate the timeline, and open a direct line of communication with your team.","u":"https://www.cyfrin.io/services/audits","d":"2026-11-03"}},"openzeppelin":{"postAuditRecord":{"s":4,"q":"The set of contracts were audited by the OpenZeppelin team [ report ] August 25, 2020 prior to deployment","u":"https://blog.audius.co/posts/audius-governance-takeover-post-mortem-7-23-22","d":"2026-11-03"},"accountability":{"s":3,"q":"Reviewed as the diff on the across-protocol/contracts repository from base commit eabc737 to head commit 1420bc5","u":"https://www.openzeppelin.com/news/across-protocol-v5-bridging-system-audit","d":"2026-11-03"},"methodDepth":{"s":6,"q":"When necessary, our researchers engage in advanced testing techniques, including fuzzing and invariant testing, to ensure system integrity.","u":"https://www.openzeppelin.com/security-audits","d":"2026-11-03"},"priceTransparency":{"s":2,"q":"Request a Security Audit","u":"https://www.openzeppelin.com/security-audits","d":"2026-11-03"}},"spearbit-cantina":{"methodDepth":{"s":5,"q":"Elite researchers and AI-native analysis go over your code together, giving you deep protocol reasoning and broad coverage in one engagement.","u":"https://www.cantina.security/web3","d":"2026-11-03"},"priceTransparency":{"s":2,"q":"Talk to our team","u":"https://www.cantina.security/web3","d":"2026-11-03"},"postAuditRecord":{"s":4,"q":"December - Cantina Audit - Link - FlashSwapRouter, AMM hook and Hedged Unit contract | The Depeg Swap extraction exploit pathway emerged through a vulnerability in the Cork Hook beforeSwap logic","u":"https://www.cork.tech/blog/post-mortem","d":"2026-11-03"},"accountability":{"s":1,"q":"May - Cantina Audit - (Audit report not yet published) - Full protocol audit","u":"https://www.cork.tech/blog/post-mortem","d":"2026-11-03"}},"certik":{"postAuditRecord":{"s":2,"q":"Gala Games - Rekt Anchain, Certik $ 216,000,000 | Woofi - Rekt Certik $ 85,000,000 | ZKasino - Rekt Certik $ 33,000,000 | Arbix Finance - REKT Certik $ 10,000,000","u":"https://rekt.news/leaderboard/","d":"2026-11-03"},"accountability":{"s":3,"q":"Smart contract audit reports are freely available to the public.","u":"https://www.certik.com/services/smart-contract-audit","d":"2026-11-03"},"methodDepth":{"s":5,"q":"Formal verification is an optional further step that certifies smart contract behavior with respect to custom function specifications.","u":"https://www.certik.com/services/smart-contract-audit","d":"2026-11-03"},"priceTransparency":{"s":2,"q":"01 Source code submission 02 Scoping & quote 03 Security analysis","u":"https://www.certik.com/services/smart-contract-audit","d":"2026-11-03"}}}}